https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:40:31.104036+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-03027 cnvd-2020-03027 2026-10-15T07:40:31.107856+00:00 cnvd-2020-03027 https://cve.radiocsirt.org/vuln/euvd-2026-36415 EUVD-2026-36415 2026-10-15T07:40:31.107889+00:00 EUVD-2026-36415 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5204 fkie_cve-2020-5204 2026-10-15T07:40:31.107903+00:00

In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correct for valid IPv4 addresses (len('255.255.255.255') == 16), but the format specifier %d allows more than 3 digits. This has been fixed in version 2.11

 https://cve.radiocsirt.org/vuln/ghsa-4g9j-24m6-cjw4 GHSA-4g9j-24m6-cjw4 2026-10-15T07:40:31.107933+00:00

In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correct for valid IPv4 addresses (len('255.255.255.255') == 16), but the format specifier %d allows more than 3 digits. This has been fixed in version 2.11

 https://cve.radiocsirt.org/vuln/gsd-2020-5204 gsd-2020-5204 2026-10-15T07:40:31.107950+00:00 gsd-2020-5204 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0069-1 openSUSE-SU-2020:0069-1 — Security update for uftpd 2026-10-15T07:40:31.107975+00:00

Security update for uftpd